86d98f48be4a0af1d3f3837581b025eb | Triage

Sharing

General

Target

86d98f48be4a0af1d3f3837581b025eb
Size

13KB
MD5

86d98f48be4a0af1d3f3837581b025eb
SHA1

e4b1d76ee2bb02fd39ee1a5853e707ae49c20ab9
SHA256

f086b21b2bafe85289f92ad93587b346168597aa02a29bdf3e6a4638f5baef02
SHA512

54372f8e288d7c07ee4f59be7a7369c9a68ecdfc057c48d2ae1139583b6d9bcd2dd66b8b445bc288b036c78886e391bea9f45c134063140fe495281ee5aa5bb5
SSDEEP

192:yu/hi3spBziWZ91FRMRuVxtqtt6T6EvU7VjxCiX54M6WPqrC/42oq+vLtr9ZCspM:Hw3spBOWZoSxtscZvU7+iXXsLdAeMF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
86d98f48be4a0af1d3f3837581b025eb
unpack001/out.upx

Files

86d98f48be4a0af1d3f3837581b025eb
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ